Information Security Risk Analyst
Our client is a major player in Luxembourg's finance industry and as a signatory of the UN Principles of Responsible Banking, the bank is committed to handing over a responsible and sustainable bank to future generations.
POSTE
Arhis People Solutions is your trusted partner for all your human resources needs. With a tailor made approach and a commitment to integrity, we offer comprehensive services, from recruitment to talent management.
Your mission
Responsible for leading, coordinating, articulating, and tracking actions related to developing and driving the implementation of the information security plan.
This involves engaging with various stakeholders on a wide range of information security matters to achieve overall business objectives.
- Challenge systems and procedures to identify potential adverse events, including hardware and software crashes, physical disasters, malicious intrusions, malware, denial of service attacks, and employee misconduct.
- Manage information classification, control, and protection.
- Oversee the management of security incidents related to the confidentiality, integrity, and availability of information.
- Ensure the integration of security requirements into the employment contract life cycle (onboarding, transfer, and termination).
- Ensure compliance with legal and regulatory requirements related to information security and prepare dashboards for the Security Committee.
- Engage with business units such as finance, legal, regulatory, compliance, audit, operations, HR, and IT to identify information security risks, propose mitigation plans, and follow up on action plans.
- Support or coordinate actions related to security incident management. Conduct research and oversee activities primarily within information security risk management.
- Maintain information security policies and ensure their application (or identify any deviations); support internal and external audits.
PROFIL
- Domain(s) of expertise : Risk
- Education (orientation) : Information Security, Cyber Security or IT
- Education (required level) : Master or equivalent by experience
- Mandatory languages : French and English (minimum level B2),
- Banking techniques : Certification such as ISO27001, CISSP (or any relevant certifications linked to Information Security),
- Min 5+ years' combined experience in IT / Information security,
- Specific experience in managing information security functions, strategy and risk,
- Able to build strong, value added, relationships with CISO community,
- Strong communication and analytical skills; possess strong communication and presentation skills along with the ability to handle multiple priorities and high stress situations,
- Strong relationship skills and collaborative style to enable success across multiple partners.